Run Trivy scan on build (#170)

Author: davidcollom

.github/workflows/build-test.yaml

@@ -83,7 +83,18 @@ jobs:
       with:
         context: .
         platforms: ${{ matrix.platform }}
+        load: true
         push: false
         tags: quay.io/jetstack/version-checker:${{github.sha}}
         cache-from: type=gha
         cache-to: type=gha,mode=max
+
+    - name: Run Trivy vulnerability scanner
+      uses: aquasecurity/[email protected]
+      with:
+        image-ref: 'quay.io/jetstack/version-checker:${{github.sha}}'
+        format: 'table'
+        exit-code: '1'
+        ignore-unfixed: true
+        vuln-type: 'os,library'
+        severity: 'CRITICAL,HIGH'